Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/5712E4D4211E11ECBF338B2FD8A014CE.roa
File: 5712E4D4211E11ECBF338B2FD8A014CE.roa (raw, json)
Hash identifier: 7rN8DhsshMwgblYVnVi1mgyOFuiOP5BprvAXrFTM7S0=
Subject key identifier: B2:32:0F:3D:0A:AE:6B:47:FC:A1:33:83:DD:3B:89:D7:4C:0E:10:CA
Certificate issuer: /CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Certificate serial: 02
Authority key identifier: A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/5712E4D4211E11ECBF338B2FD8A014CE.roa
Signing time: Wed 29 Sep 2021 12:11:14 +0000
ROA not before: Wed 29 Sep 2021 12:11:10 +0000
ROA not after: Fri 29 Sep 2023 12:11:10 +0000
asID: 37443
IP address blocks: 2c0f:ffe8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Validity
Not Before: Sep 29 12:11:10 2021 GMT
Not After : Sep 29 12:11:10 2023 GMT
Subject: CN=615457e1-51fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:de:e3:99:1f:65:6d:74:50:b2:f7:cf:85:
af:b9:0e:92:f0:33:77:74:23:68:60:21:0b:d6:25:
23:73:6f:aa:33:ec:9b:5f:27:6b:e7:49:f0:2d:35:
61:56:4f:b8:df:f4:34:5d:d8:4a:b4:30:5e:e3:13:
03:9f:44:aa:0a:89:f0:97:30:0c:2f:d4:78:f2:46:
e0:af:fa:0c:fb:d3:cb:4e:07:31:99:12:76:33:34:
ff:dd:18:64:6c:37:12:3a:bf:64:50:e5:c0:3b:26:
27:a4:5f:7f:86:65:ed:8f:61:c5:23:80:c3:6e:21:
25:8b:f4:54:c3:03:4f:3c:ae:d5:21:33:d5:b7:70:
11:6b:c4:5f:a4:19:c7:06:3e:de:f9:15:69:01:af:
b1:1f:82:03:07:99:f6:82:58:25:bf:36:c2:37:ba:
e7:4d:52:8c:6c:ae:94:35:f5:fe:49:06:96:d8:12:
c3:ee:ff:91:26:f9:f0:48:01:8a:21:95:a1:f1:f6:
40:f2:c3:16:aa:14:f4:c1:a3:f3:1a:81:c0:c0:c0:
7e:79:80:f6:5e:17:cc:b1:e2:e3:60:95:4a:a4:3f:
37:af:bc:27:85:6c:93:de:b0:a8:36:29:dc:4e:32:
a8:82:7f:76:0b:cd:e8:69:55:db:1c:80:c2:74:40:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:32:0F:3D:0A:AE:6B:47:FC:A1:33:83:DD:3B:89:D7:4C:0E:10:CA
X509v3 Authority Key Identifier:
keyid:A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/5712E4D4211E11ECBF338B2FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ffe8::/32
Signature Algorithm: sha256WithRSAEncryption
0e:d6:67:e1:1c:c1:64:07:52:b0:2f:48:fa:41:af:3d:07:54:
f2:7e:5e:37:ea:b6:df:84:35:97:c1:e2:b6:d3:01:25:97:a4:
d8:84:37:c3:8e:79:91:4f:3d:b8:1e:61:44:5e:7d:75:b0:70:
43:68:a0:99:2f:0c:21:dc:f4:a9:92:6d:a2:3b:00:1d:93:51:
98:b3:80:1f:ed:c4:b9:85:4c:f9:81:5f:7d:59:08:4c:de:f9:
41:67:ad:1e:88:cd:61:c3:ca:e7:f1:53:5c:93:e1:2e:6f:93:
e3:cf:1a:4b:ec:00:59:f3:d5:05:9c:0f:11:f3:0c:8b:8f:65:
6c:25:de:61:59:6e:be:dd:18:80:09:e3:7f:60:b7:9e:62:9d:
c5:2a:53:54:66:12:28:36:ed:fa:18:4d:d2:49:41:52:bc:b2:
0a:64:72:56:80:71:ca:fe:61:4f:c0:55:c0:11:ad:b8:16:75:
6d:6f:4d:3f:d2:21:06:45:52:58:c6:b1:84:41:dc:a4:cd:bf:
bc:d1:20:bf:1c:56:08:d3:f9:38:88:84:46:6c:06:cf:d8:a5:
fa:63:83:e1:1b:f8:e3:c4:ca:b7:7c:a8:58:fb:d7:eb:13:0c:
93:c1:f3:cf:1f:07:38:4c:5c:23:5c:0b:1c:4b:46:28:4a:ce:
8c:4f:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org